$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft File: GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft (raw, json) Hash identifier: ANvNjhY1nrHs5kLk06oYw1alQd2Olj3xsjkInt6u/ME= Subject key identifier: B0:97:23:85:F5:FF:C0:39:AC:DA:96:B3:78:80:33:1A:91:ED:D8:A6 Authority key identifier: 18:61:53:CB:98:88:38:A3:A6:D4:8C:F0:42:3C:5B:46:23:00:59:E8 Certificate issuer: /CN=A91AE69C/serialNumber=186153CB988838A3A6D48CF0423C5B46230059E8 Certificate serial: 0260 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft Manifest number: 025C Signing time: Sun 27 Apr 2025 01:24:58 +0000 Manifest this update: Sun 27 Apr 2025 01:24:58 +0000 Manifest next update: Sun 04 May 2025 01:24:58 +0000 Files and hashes: 1: GGFTy5iIOKOm1IzwQjxbRiMAWeg.crl (hash: 96a931BEqKvQifhZclB0lzeokXjSaT4+Dtf3fibJ4B0=) 2: DD1FEE48C77311EEA5076E2CC4F9AE02.roa (hash: AMI8B01oJYBvuALPO9a5072lSyPAKpdtjtQhc2T4uR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.crl rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 01:24:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 608 (0x260) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE69C, serialNumber=186153CB988838A3A6D48CF0423C5B46230059E8 Validity Not Before: Apr 27 01:24:58 2025 GMT Not After : May 4 01:24:58 2025 GMT Subject: CN=680d876a-e625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:32:c9:74:44:90:35:66:2c:bd:54:ed:40:62: 51:d9:50:40:05:9d:d6:6a:fd:50:73:b0:81:35:73: 2a:fc:47:20:2e:15:e5:b8:aa:ea:6c:c7:fb:31:88: 01:dd:a0:ab:60:0c:5c:00:f3:0d:d5:41:0c:b9:d8: b8:2c:11:fd:e9:29:f8:62:eb:ae:5a:3f:7a:99:55: 83:1e:60:e4:95:9a:52:2f:74:03:ca:64:16:bf:4b: 93:5e:08:f2:1b:76:9b:95:de:a4:43:c8:e6:75:15: 8e:e9:e5:80:79:4c:f1:ee:5c:8e:9b:17:1d:aa:58: 95:41:b6:c3:2e:aa:1b:4b:81:ad:91:81:95:2a:af: 1b:ed:2a:cd:f6:89:d8:a1:23:4e:0d:e8:90:e4:61: eb:ba:7f:84:82:3b:58:8c:bb:52:ab:1c:d6:f8:3b: 34:0a:05:eb:81:a7:37:94:92:52:a4:2a:15:12:7b: 26:58:4a:3a:1f:a2:44:cc:eb:e4:25:66:5e:84:41: a2:4a:24:e8:0e:6a:1a:54:c5:f7:f1:64:fc:c3:26: 5f:73:ed:7a:64:a7:c7:e9:98:73:4d:78:89:44:b0: 8d:34:a0:30:d2:1e:3e:d8:ec:a2:1f:c7:f7:f1:b5: 07:b9:7e:70:3b:8b:70:99:fb:cc:15:af:71:1d:06: c0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:97:23:85:F5:FF:C0:39:AC:DA:96:B3:78:80:33:1A:91:ED:D8:A6 X509v3 Authority Key Identifier: keyid:18:61:53:CB:98:88:38:A3:A6:D4:8C:F0:42:3C:5B:46:23:00:59:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:63:66:c0:14:d2:13:33:4c:98:81:5d:c4:68:d4:7c:20:b9: e2:5f:b8:11:de:5b:72:b5:d9:e7:2d:ab:1e:2b:2a:ea:da:37: 3e:f2:bb:67:b3:12:82:6e:91:16:38:ac:dc:12:6c:08:ba:51: 84:d1:66:c1:dc:d3:59:7b:b6:16:1f:6f:f2:13:dd:fd:a3:19: 73:ad:cc:2d:24:2f:fa:00:9d:15:96:56:01:ee:70:69:12:33: 0d:77:49:19:30:33:ff:bc:7c:4a:7d:44:c0:6f:ad:e8:08:36: 46:c9:f0:c1:58:1d:1f:cb:3a:e4:20:39:cf:56:84:58:b0:fb: 90:9a:14:ea:db:bb:4b:20:4e:d3:bb:02:29:12:88:00:81:0b: fb:17:cc:d4:d8:a3:73:d7:97:00:3e:c8:fe:dc:06:1a:fb:f0: 75:fe:d1:db:e6:5b:a2:7e:d2:6e:49:97:50:74:cb:25:3f:22: 18:3a:12:06:58:f7:e2:b9:eb:2c:4e:0f:ec:0c:8e:7e:26:09: 07:5c:1e:ac:0e:9a:58:aa:dd:76:bc:c7:67:f3:22:58:17:f5: 5e:09:f7:35:e6:66:4e:84:d6:95:3b:5d:de:6f:81:31:8b:67: ab:55:e7:57:1d:fe:ba:67:22:37:22:15:57:4a:84:0e:d4:0d: 97:ae:04:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU2OUMxMTAvBgNVBAUTKDE4NjE1M0NCOTg4ODM4QTNBNkQ0OENGMDQyM0M1QjQ2 MjMwMDU5RTgwHhcNMjUwNDI3MDEyNDU4WhcNMjUwNTA0MDEyNDU4WjAYMRYwFAYD VQQDEw02ODBkODc2YS1lNjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsTLJdESQNWYsvVTtQGJR2VBABZ3Wav1Qc7CBNXMq/EcgLhXluKrqbMf7MYgB 3aCrYAxcAPMN1UEMudi4LBH96Sn4YuuuWj96mVWDHmDklZpSL3QDymQWv0uTXgjy G3abld6kQ8jmdRWO6eWAeUzx7lyOmxcdqliVQbbDLqobS4GtkYGVKq8b7SrN9onY oSNODeiQ5GHrun+EgjtYjLtSqxzW+Ds0CgXrgac3lJJSpCoVEnsmWEo6H6JEzOvk JWZehEGiSiToDmoaVMX38WT8wyZfc+16ZKfH6ZhzTXiJRLCNNKAw0h4+2OyiH8f3 8bUHuX5wO4twmfvMFa9xHQbAswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLCXI4X1 /8A5rNqWs3iAMxqR7dimMB8GA1UdIwQYMBaAFBhhU8uYiDijptSM8EI8W0YjAFno MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTY5Qy85RUIwNzk5ODEy N0ExMUVEOTAyREZFMjdDNEY5QUUwMi9HR0ZUeTVpSU9LT20xSXp3UWp4YlJpTUFX ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dHRlR5NWlJT0tPbTFJendRanhiUmlNQVdlZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTY5Qy85RUIwNzk5ODEyN0ExMUVEOTAyREZFMjdDNEY5QUUwMi9HR0ZUeTVpSU9L T20xSXp3UWp4YlJpTUFXZWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJY2bAFNITM0yYgV3EaNR8ILniX7gR3ltytdnnLaseKyrq2jc+8rtn sxKCbpEWOKzcEmwIulGE0WbB3NNZe7YWH2/yE939oxlzrcwtJC/6AJ0VllYB7nBp EjMNd0kZMDP/vHxKfUTAb63oCDZGyfDBWB0fyzrkIDnPVoRYsPuQmhTq27tLIE7T uwIpEogAgQv7F8zU2KNz15cAPsj+3AYa+/B1/tHb5luiftJuSZdQdMslPyIYOhIG WPfiuessTg/sDI5+JgkHXB6sDppYqt12vMdn8yJYF/VeCfc15mZOhNaVO13eb4Ex i2erVedXHf66ZyI3IhVXSoQO1A2XrgQT -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:07 2025 by rpki-client on console.sobornost.net